HIPAA Security Rule Proposed Update — HHS Proposes Mandatory Encryption and Enhanced Requirements

HHS proposed significant updates to the HIPAA Security Rule in January 2025, including mandatory encryption of ePHI (removing the "addressable" designation), mandatory MFA, enhanced audit controls, and network segmentation requirements.